9636a70bd995270ce87fccc746149221_JaffaCakes118

General

Target
9636a70bd995270ce87fccc746149221_JaffaCakes118
Size 1.5MB
Sample240604-znpdssba5t
SHA256 372230e56fba59eeb7277ae1d6c3666fc5c46998d56d820a38f68f12336dc03c
MD5 9636a70bd995270ce87fccc746149221
SHA1 3d7b7c14f9daeb2101612191118492e262e0f9c2
SHA512 d4a291eee5bfcf767fd84778105d3115ba3b9d843907cfa99eb968dee1a1c07149d01be949ee86e9b78e5b13656a2a70f078611273cfb37d11578724121cc00b
SSDEEP 24576:b8OKL+sIpDpMIq17INI3djEPfINrFvjwqBypCI8+K3YSlRxNRB6SJimZRKZss2YL:IhIBp7fo4fKrFvkwyCI8+K5gSJ7ZdYL
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 22 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

9636a70bd995270ce87fccc746149221_JaffaCakes118

.apk 1.5MB

9636a70bd995270ce87fccc746149221_JaffaCakes118

SHA256 372230e56fba59eeb7277ae1d6c3666fc5c46998d56d820a38f68f12336dc03c
MD5 9636a70bd995270ce87fccc746149221
SHA1 3d7b7c14f9daeb2101612191118492e262e0f9c2
SHA512 d4a291eee5bfcf767fd84778105d3115ba3b9d843907cfa99eb968dee1a1c07149d01be949ee86e9b78e5b13656a2a70f078611273cfb37d11578724121cc00b
SSDEEP 24576:b8OKL+sIpDpMIq17INI3djEPfINrFvjwqBypCI8+K3YSlRxNRB6SJimZRKZss2YL:IhIBp7fo4fKrFvkwyCI8+K5gSJ7ZdYL
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.xgjjpv.fvespynt

android.permission.INTERNET android.permission.READ_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.VIBRATE android.permission.RECORD_AUDIO android.permission.CHANGE_WIFI_STATE android.permission.WAKE_LOCK com.android.launcher.permission.INSTALL_SHORTCUT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW com.android.launcher.permission.INSTALL_SHORTCUT android.permission.WAKE_LOCK android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE com.android.launcher.permission.INSTALL_SHORTCUT android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.WAKE_LOCK android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.GET_TASKS

cn.c.y.g

android.intent.action.USER_PRESENT com.lseiei.downloadManager android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

net.p.y.b

android.intent.action.PACKAGE_ADDED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT com.lseiei.downloadManager

com.b.y.r

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.net.conn.CONNECTIVITY_CHANGE com.lseiei.downloadManager android.intent.action.USER_PRESENT

com.iad.kf.BR

android.intent.action.USER_PRESENT com.lseiei.downloadManager android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

com.fivefeiwo.coverscreen.SR

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT broadcast.route.control

com.grferfe.mhunmcx.Qc

android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE

com.sadca.smenfw.Sd

android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE

com.tuyou.duny.PcCR

android.intent.action.PACKAGE_ADDED android.net.conn.CONNECTIVITY_CHANGE

com.tuyou.peng.PuangR

android.intent.action.PACKAGE_ADDED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT

com.ten.ctao.DCRao

android.intent.action.PACKAGE_ADDED android.net.conn.CONNECTIVITY_CHANGE

com.ten.ttao.DRao

android.intent.action.PACKAGE_ADDED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT

com.ten.cctao.DCCRao

android.intent.action.PACKAGE_ADDED android.net.conn.CONNECTIVITY_CHANGE

Android Permissions

9636a70bd995270ce87fccc746149221_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

9636a70bd995270ce87fccc746149221_JaffaCakes118

com.kait.twister.TwisterActivity

com.kait.twister.MyListActivity

com.kait.twister.DetailActivity

net.p.y.a

com.b.y.ia

com.b.y.la

com.fivefeiwo.coverscreen.SA

com.fivefeiwo.coverscreen.WA

com.grferfe.mhunmcx.Qb

com.sadca.smenfw.Sb

com.tuyou.duny.PcCA

com.tuyou.peng.PauA

com.ten.ctao.BCAao

com.ten.ttao.BAao

com.ten.cctao.BCCAao

cn.c.y.f

com.grferfe.mhunmcx.Qd

com.sadca.smenfw.Sc

com.tuyou.peng.PuangS

com.ten.ttao.Esao

cn.c.y.g

net.p.y.b

com.b.y.r

com.iad.kf.BR

com.fivefeiwo.coverscreen.SR

com.grferfe.mhunmcx.Qc

com.sadca.smenfw.Sd

com.tuyou.duny.PcCR

com.tuyou.peng.PuangR

com.ten.ctao.DCRao

com.ten.ttao.DRao

com.ten.cctao.DCCRao

Sharing

General

Malware Config

Signatures

File Explorer

9636a70bd995270ce87fccc746149221_JaffaCakes118

com.kait.twister.TwisterActivity

com.kait.twister.MyListActivity

com.kait.twister.DetailActivity

net.p.y.a

com.b.y.ia

com.b.y.la

com.fivefeiwo.coverscreen.SA

com.fivefeiwo.coverscreen.WA

com.grferfe.mhunmcx.Qb

com.sadca.smenfw.Sb

com.tuyou.duny.PcCA

com.tuyou.peng.PauA

com.ten.ctao.BCAao

com.ten.ttao.BAao

com.ten.cctao.BCCAao

cn.c.y.f

com.grferfe.mhunmcx.Qd

com.sadca.smenfw.Sc

com.tuyou.peng.PuangS

com.ten.ttao.Esao

cn.c.y.g

net.p.y.b

com.b.y.r

com.iad.kf.BR

com.fivefeiwo.coverscreen.SR

com.grferfe.mhunmcx.Qc

com.sadca.smenfw.Sd

com.tuyou.duny.PcCR

com.tuyou.peng.PuangR

com.ten.ctao.DCRao

com.ten.ttao.DRao

com.ten.cctao.DCCRao

Android Permissions

9636a70bd995270ce87fccc746149221_JaffaCakes118